Privacy Policy

This policy explains what data The Poker Dojo collects, why we collect it, who we share it with, and the rights you have over it. We’ve tried to keep it plain and honest. If anything is unclear, email us at support@thepokerdojo.com.

1. Who we are (data controller)

The Poker Dojo is a small, independent educational project operated from the United Kingdom. For the purposes of UK GDPR and EU GDPR, we are the data controller for the personal data described here. You can contact us about any privacy matter at support@thepokerdojo.com.

2. What data we collect, and why

We keep the data we collect deliberately small:

• Account details — your email address and a password. The password is hashed by our authentication provider; we never store it in plaintext and cannot see it. We use this to create your account, sign you in, and contact you about the Service.
• Training data — the hands you play in the simulator, your graded decisions, your stats, your progress, and your XP and belts. We use this to run the Service: to track your improvement, show your results, and grade your play.
• Hand-history text you paste (optional) — if you choose to paste hand-history text for analysis, we process it to generate that analysis for you. You only ever share this if you decide to.
• Billing information (Pro subscribers) — when you upgrade to Pro, payments are handled by Stripe. We don’t see or store your full card details — Stripe processes them. We keep a Stripe customer and subscription reference and your plan status so we can give you access and manage your billing.

We don’t run advertising or behavioural tracking, and we don’t sell your data.

3. Legal bases for processing

Under UK and EU GDPR, we rely on the following legal bases:

• Contract — to provide the Service you’ve asked for: creating and securing your account, saving your training progress, and — for Pro subscribers — processing your subscription through Stripe and giving you access.
• Legal obligation — to keep the billing and tax records we’re required to retain for subscription payments.
• Legitimate interests — to keep the Service secure, reliable, and free from abuse, and to understand how it’s used so we can improve it, in a way that respects your rights.
• Consent — for optional features you actively choose to use, such as pasting hand-history text for analysis or using the AI coach. You can withdraw consent at any time by not using those features.

4. The AI coach: how your data flows

The AI coach is optional. When you ask it for coaching, we send your aggregated stats for a single stake to Anthropic (through the Vercel AI Gateway) so it can generate coaching text. We do not send your email, your account identifiers, or anything that identifies you personally — only the aggregated numbers needed to produce the coaching. If you never use the AI coach, none of your data is sent for this purpose.

5. Sub-processors and third parties

We use a few trusted service providers to run the Service. They process data on our behalf, under contract:

• Supabase — authentication and our Postgres database, where your account and training data are stored. This data is hosted in the EU (Paris) region.
• Vercel — application hosting and content delivery (the platform that serves the website to you).
• Stripe — payment processing for Pro subscriptions. When you subscribe, Stripe handles your card details and billing securely; we never see or store your full card number.
• Anthropic, accessed via the Vercel AI Gateway — generates the optional AI coach text from aggregated, non-identifying stats, as described above.
• PostHog — privacy-friendly product analytics so we can see how features are used and where new players get stuck. It’s EU-hosted, configured without tracking cookies, and does not follow you across other websites. We never send it your card details or hand-by-hand content.

We don’t sell your data, and we don’t share it with advertisers.

6. Cookies

We use only strictly-necessary cookies — specifically the cookie that keeps you signed in (your authentication session). We do not use advertising cookies, third-party tracking cookies, or analytics that profile you across sites. Our product analytics (PostHog) is configured cookieless — it stores nothing on your device — so it adds no cookies here. Because the sign-in cookie is essential to the Service working, it doesn’t require consent under the rules, but we want you to know exactly what’s there.

7. Data retention

We keep your account and training data for as long as your account is active, so your progress is there when you come back. When you delete your account, your data is permanently removed. Hand-history text you paste is processed to produce your analysis and is not kept for any longer than needed to provide that feature. We may keep minimal records where the law requires us to.

8. Your rights under UK and EU GDPR

You have the right to:

• Access — get a copy of the personal data we hold about you;
• Rectification — have inaccurate data corrected;
• Erasure — have your data deleted;
• Portability — receive your data in a portable format you can take elsewhere;
• Objection and restriction — object to or restrict certain processing, including processing based on our legitimate interests.

We’ve built two of these right into the app, so you’re always in control: from your /account page you can export all of your data at any time, and delete your account and all of your data at any time. For anything else, just email us and we’ll help.

9. How to contact us or complain

For any privacy question or to exercise a right, email support@thepokerdojo.com. If you’re in the UK and you’re not satisfied with how we’ve handled your data, you have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk. If you’re in the EU, you can complain to your local data protection authority. We’d appreciate the chance to put things right first, though.

10. Children

The Poker Dojo is for adults learning poker strategy and is not intended for anyone under 18. We don’t knowingly collect data from under-18s. If you believe a minor has created an account, contact us and we’ll remove it.

11. Changes to this policy

We may update this policy as the Service evolves or to reflect legal changes. When we do, we’ll update the “Last updated” date at the top of this page, and we’ll flag significant changes where we reasonably can.

12. Contact

We’re happy to answer anything about your privacy. Reach us at support@thepokerdojo.com.